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Abstract. A pointwise definable model is one in which every ob- 
ject is definable without parameters. In a model of set theory, this 
property strengthens V = HOD, but is not first-order expressible. 
Nevertheless, if ZFC is consistent, then there are continuum many 
pointwise definable models of ZFC. If there is a transitive model of 
ZFC, then there are continuum many pointwise definable transitive 
models of ZFC. What is more, every countable model of ZFC has a 
class forcing extension that is pointwise definable. Indeed, for the 
main contribution of this article, every countable model of Godel- 
Bernays set theory has a pointwise definable extension, in which 
every set and class is first-order definable without parameters. 



1. Introduction by way of a curious logic conundrum 

One occasionally hears the argument — let us call it the math-tea 
argument, for perhaps it is heard at a good math tea — that there must 
be real numbers that we cannot describe or define, because there are are 
only countably many definitions, but uncountably many reals. Does it 
withstand scrutiny?"^ 

We can be precise, of course, and define that an element a of a 
structure Ai is definable (without parameters) when there is a formula 
(p{x) in the language of M. such that Ai \= ip[x] only at a: = a. In the 
continuum of the ordered real line (M, <), for example, there are no 
definable elements, since the automorphism group acts transitively by 
translation and all points look alike. With the ordered field structure 
(M, -|-, ■, 0, 1, <), however, every algebraic number becomes definable. 
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but only these, by Tarski's theorem on real closed fields. As one adds 
additional structure (R, +, •, 0, 1, <, Z, sin(x), e^, • • • ), the collection of 
definable reals grows larger. Eventually, we will in our definitions be 
attracted to the possibilities of using higher order mathematical objects 
and constructions, such as function classes, spaces or measures, and this 
amounts to defining objects in increasingly large fragments Va of the 
sct-thcorctic universe. Most all of the classical mathematical structure 
is itself definable in the set-theoretic structure (1^+^,g), a model of 
the Zermelo axioms, and so the definable reals of this structure includes 
almost every real ever defined classically. The structures arising with 
larger ordinals, however, allow us to define even more reals. 

It would be a kind of cheating, for the problem at hand, to define 
a real r or other object by using a language or structure that was 
itself otherwise undefinable or uncanonical, such as by using a constant 
symbol with value r or a unary predicate satisfied only at r; this would 
be like defining vr as "the value of the constant symbol tt," which is 
surely unsatisfying. Similarly, we do not want to offer a definition of r 
in some enormous (K^, e) when a is not itself somehow definable, since 
in effect this is using a as a kind of parameter. Rather, the spirit of the 
problem seems to be to define reals using only structure that is itself 
definable in the set-theoretic background. This amounts, of course, 
simply to defining the real directly with respect to the set-theoretic 
background {V, g) in the first place. 

In any fixed structure A4 in a countable language, including the 
higher-order set-theoretic structures (V^,e), the math-tea argument 
seems fine: since there are only countably many definitions to use, but 
uncountably many reals, there will indeed be many reals that are not 
definable there. 

But when we make the move as we have discussed to defining reals 
or other objects with respect to the set-theoretic background {V, g), a 
subtle mcta-mathcmatical obstacle arises for the math-tea argument. 
Specifically, in order to count the definable objects, the argument pre- 
sumes that we have a way of associating to each definable object a 
definition of it, a definability map r i-^ where r is the unique object 
satisfying ■?/^(r). This is not a problem when we are working with def- 
initions over a set structure, since the satisfaction relation over a set 
structure is definable from that structure, but it becomes problematic 
with definitions over V, for reasons connected with Tarski's theorem on 
the non-definability of truth. Basically, there is no uniform first-order 
way to express the concept "a; is defined by formula ip" within set the- 
ory. This obstacle for the math-tea argument suggests a possibility 
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that perhaps one could hve in a model of ZFC in which every real is 
definable without parameters. 

Question 1. Is it consistent with the axioms of set theory that every 
real is definable in the language of set theory without parameters? 

The answer is Yes. Indeed, much more is true: if the ZFC axioms 
of set theory are consistent, then there are models of ZFC in which 
every object, including every real number, every function on the reals, 
every set of reals, every topological space, every ordinal and so on, 
is uniquely definable without parameters. Inside such a universe, the 
math-tea argument comes ultimately to a false conclusion. 

Definition 2. A first-order structure M. is pointwise definable if every 
element of M. is definable in M. without parameters. 

In a pointwise definable model, every object can be specified as the 
unique object with some first-order property. In such models, all ob- 
jects are discernible; every object satisfies a unique principal complete 
1-type. Notice that the property of being pointwise definable is not 
first-order expressible, since it is not preserved by elementary exten- 
sions. Clearly, pointwise definable models in a countable language must 
be countable, since there are only countably many definitions. 

Theorem 3. 

(1) // ZFC is consistent, then there are continuum many non- 
isomorphic pointwise definable models of ZFC. 

(2) // there is a transitive model of ZFC, then there are continuum 
many transitive pointwise- definable models of ZFC. 

(3) Every countable model of ZFC has a class forcing extension that 
is pointwise definable. 

(4) Every countable model of GBC has a pointwise definable exten- 
sion, in which every set and class is first-order definable without 
parameters. 

The first two claims have fairly soft proofs and might be consid- 
ered to be a part of the mathematical folklore. Statement (1) could 
be credited to Myhill [Myh52]. The latter two claims are more sub- 
stantial forcing arguments. Statement (3) is mentioned independently 
in [Ena05] and, in the case of countable transitive models, in [Dav82] . 
Our main contribution is statement (4), which implies the earlier state- 
ments. The rest of this article is devoted to proving these facts and 
several other related results we find interesting. We begin in section 2 
with some elementary observations about pointwise definable models 
of set theory and prove the easier initial results. In sections 3 and 4, 
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we move into the forcing arguments, relying on work of Simpson in the 
case of ZFC and a result of S. Friedman, building on a result of Kossak 
and Schmerl from PA, for the fully general GBC case. 

2. PoiNTWiSE Definable Models of ZFC 

The first task is to establish the basic fact that pointwise definable 
models of set theory do indeed exist. 

Theorem 4. If there is a model of ZFC, then there is a pointwise defin- 
able model of ZFC. Indeed, there are continuum many non-isomorphic 
such models. 

Proof. If there is a model of ZFC, then there is a model M |= ZFC + 
V = HOD. Such a model has a parameter-free definable well-ordering 
of the universe, and therefore it has parameter-free definable Skolcm 
functions, which simply select the least witness with respect to the 
definable well-ordering. If Mq is the collection of all definable elements 
of M, then it is closed under these definable Skolem functions and thus 
Mq -< M. From this, it follows that definitions work the same in Mq 
as in M, and so every object of Mq is definable in Mo. Thus, Mq is a 
pointwise definable model of ZFC. By the Godel-Rosser theorem, there 
are continuum many consistent completions of ZFC + V — HOD, and 
we have established that each such theory has a pointwise definable 
model. □ 

Myhill [Myh52] was evidently the first to observe (in contemporary 
language) that if ZFC is consistent, then there is a pointwise definable 
model of GBC -|- ^ = L, by essentially the argument we have given, 
using the definable Skolem functions of L. Indeed, Myhill was fully 
aware of the implications for the math-tea argument, for he concludes 
his otherwise terse article with: 

One often hears it said that since there are indenu- 
merably many sets and only denumerably many names, 
therefore there must be nameless sets. The above shows 
this argument to be fallacious. 

The fact is that every pointwise definable model of ZFC arises in 
exactly the manner of the proof of theorem 4. A prime model is one 
that embeds elementarily into every model of its theory. 

Observation 5. The following are equivalent: 

(1) M is a pointwise definable model of ZFC. 

(2) M consists of the definable elements, without parameters, of a 
model o/ZFC + y = HOD. 
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(3) M IS a prime model of ZFC + V = HOD. 

Proof. The first statement implies the second since every pointwise- 
definable model satisfies V — HOD, and the converse imphcation is 
the proof of theorem 4. These models are exactly the prime models 

of ZFC + V = HOD, since the theory admits definable Skolcm func- 
tions, and so every model of ZFC-I- V = HOD elementarily embeds the 
definable hull of the empty set in that model. □ 

More generally, if M is any model of ZF, then the collection Mq 
consisting of the elements of M that are definable without parameters 
in M is an elementary substructure of HOD^, because it is closed under 
the canonical Skolem functions for HOD^, which are definable in M. 
A similar fact is observed in [Ena05, Theorem 2.11]. The model Mq 
is therefore prime relative to M, in the sense that whenever M = N, 
then Mo embeds elementarily in HOD"^. 

Note that if two pointwise definable models have the same theory, 
then they are isomorphic, since the definitions of the elements tell you 
the isomorphism. Next, we show that there are also numerous well- 
founded pointwise definable models of set theory, if there is a well- 
founded model of set theory at all. 

Theorem 6. If there is a transitive model of ZFC, then there are con- 
tinuum many transitive pointwise- definable models of ZFC. 

Proof. If there is a transitive model M of ZFC, then there is a transi- 
tive model of ZFC -\-V = HOD, such as the model or any of the 
models obtained by forcing V = HOD over M, and such models exist if 
M is countable. By observation 5, the collection of parameter-free de- 
finable elements of A^ is a well-founded pointwise-definable elementary 
substructure, whose Mostowski collapse is as desired. 

To construct continuum many such models, suppose that M is any 
countable transitive model of ZFC. Since M is countable, there are a 
perfect set of M-generic Cohen reals c, with which we may form the 
forcing extension M[c]. By any of the usual methods, such as coding 
sets into the GCH pattern (which we will shall explain in greater detail 
in section 3), we may form a further forcing extension M[c][G'] satisfy- 
ing ZFC + V = HOD. The M[c]-generic filter G is built in a diagonal 
construction meeting the countably many dense classes of M[c]. By 
ensuring that c is the first set to be coded into the GCH pattern — we 
could arrange that the GCH holds in M[G] at K„ exactly when the 
n*^ digit of c is 1 — we may assume that c is definable without param- 
eters in M[c][G]. Thus, if Mq is the collection of definable elements of 
M[c][G], then it is pointwise definable and contains c. Since there are 
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continuum many such reals c, we have thereby produced continuum 
many transitive pointwise definable models of ZFC. □ 

A similar observation estabfishes the following folklore result. The 
minimal transitive model of ZFC is La for the smallest ordinal a for 
which La 1= ZFC, if any such ordinal exists. If M is any transitive 
model of ZFC, then L^ |= ZFC and L^ = La for a = ORD^ , and so 
the minimal model exists and is included within M, thereby justifying 
its name. 

Theorem 7. The minimal transitive model of ZFC is pointwise defin- 
able. If Ljs is pointwise definable, then the next fi > fi with L^ |= ZFC, 
if it exists, is also pointwise definable. 

Proof. If La is the minimal transitive model of ZFC, then by condensa- 
tion the definable hull of in La collapses to La, and so every element 
of La is definable in L^^. If is a pointwise definable model of ZFC 
and /3 is the smallest ordinal above /3 for which L^ \= ZFC, then (3 is de- 
finable in as the largest ordinal such that Lfj \= ZFC. It follows that 
every element of is definable in L^, by using a definition relativized 
to L^, which is definable in L^. If D is the set of definable elements of 
L^, then the Mostowski collapse of D will have height larger than /3, 

and be a model of ZFC -\-V = L, so hy the minimality of ^ it will be 
all of L^. Thus, L^ is pointwise definable, as desired. □ 

The phenomenon of theorem 7 extends to describable limits of such 
La. For example, the first L/j |= ZFC for which /3 is a limit of a for 
which La \= ZFC is also pointwise definable, because the definable 
hull oi Lp will collapse to such a limit and therefore collapse to L^s 
itself. And similarly for many other limits. But if La is an elementary 
substructure of L^, for a ^ (3, then of course cannot be pointwise 
definable, since the definable elements must lie in the range of the em- 
bedding. Similarly, if cuf < a, then La cannot be pointwise definable, 
irrespective of whether it satisfies ZFC or not, since this property is 
absolute to L and such La are uncountable in L. 

Theorem 8. There are arbitrarily large ^ < o'f for which {L^, e) is 

pointwise definable. If there are arbitrarily large a < for which 
La 1= ZFC, then there are arbitrarily large such a for which La \= ZFC 
and is pointwise definable. 

Proof. The second claim is essentially [Ena02, thm 3.7]. For the first 
claim, observe that every real of L is definable without parameters 
in some countable L^, because the L-least real z not definable in any 
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countable L^, if any should exist, is thereby definable in L^l, which will 
condense to a definition of z in some countable L^, giving a contradic- 
tion. Indeed, by taking the definable hull of the empty set, we find 
that z is definable in a pointwisc definable L^. It follows that such ^ 
must be unbounded in cjf , establishing the first claim. For the second 
claim, suppose that there are unboundedly many a < oui for which 
La 1= ZFC. Observe that every countable ordinal ^ < uf is definable 
without parameters in La |= ZFC, where a is the + 1)*^^ ordinal for 
which La \= ZFC, because this L„ can sec exactly ^ many smaller /3 
for which |= ZFC, an argument that recalls the definition of Laver 
functions for uplifting cardinals in [HJ]. Combining the previous facts, 
every real z of L is definable in some L^, which is itself definable in 
some La \= ZFC, and so z is in the definable hull of La, which con- 
denses to a pointwise definable Lqq |= ZFC containing z. Since z was 
arbitrary in L, these ao must be unbounded in cuf , as desired. □ 

A model M of ZF is u -standard if the natural numbers of M have the 
standard order-type u. More generally, M is C-standard for an ordinal 
C if the ordinals of M have a member, so that the well-founded 
initial segment of the ordinals of M has order type exceeding 

Theorem 9. If there are arbitrarily large a < for which La \= ZFC, 
then every real in V is an element of a pointwise definable u-standard 
model of ZFC + V = L, whose well-founded initial segment can be as 
large in the countable ordinals ofV as desired. 

Proof. The argument of theorem 8 shows under the hypothesis that 
the conclusion is true in L. We complete the proof of the theorem 
by observing that the statement that every real of is in a pointwise 
definable w-standard model of ZFC + V = L has complexity U^, since 
it has the form "/or every real, there is a countable structure... where 
the omitted portion is arithmetic, since it involves quantification only 
over the elements of the structure and the digits of the real. Thus, 
by Shoenfield absoluteness this statement is absolute from L to and 
hence is true in l^, as desired, even if V has many more reals and larger 
countable ordinals than L. Note that if an w-standard model M has 
a real z coding a countable ordinal C, then M will decode this real 
correctly, and so M will be well-founded beyond C, and the theorem is 
proved. □ 

Corollary 10. // there are arbitrarily large a < uj^ with La \= ZFC, 
then every countable transitive set M is a countable transitive set inside 
a structure M+ that is a pointwise definable model of ZFC -\- V = L, 
and M+ is well-founded beyond the rank of M. 
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Proof. Code M by a real z, and place z inside a pointwise definable 
w-standard model M+ ^ ZFC + V ^ L. Since M+ performs the 
Mostowski collapse of the structure coded by z correctly, it follows 
that M is a transitive set in M+. (In this sense, M end-extends to 
M"*".) In particular, M"*" is well-founded beyond the rank of M. □ 

Let us notice a few things about these arguments. First, although 
in L we produced fully well-founded pointwise definable models, if in 
theorem 9 we were to have made that part of the statement, then 
the complexity would have risen to Hg and we would have lost the 
absoluteness that allowed us to bring the statement from L to V. And 
clearly, we cannot expect to place non-constructible reals inside well- 
founded models of V = L. Second, the hypothesis that there are 
arbitrarily large a < cuf with La |= ZFC follows from the simpler 
(but strictly stronger) hypothesis that there is a single uncountable 
transitive model of ZFC, because one may consider increasingly large 
countable elementary substructures of the L of such a model. We may 
omit these hypotheses completely in the theorems above, if it is desired 
only to have w-standard pointwise definable models of ZFC* + V — L, 
where ZFC* is some finite fragment of ZFC, rather than full ZFC, since 
by refiection and condensation there are arbitrarily large countable Lq, 
satisfying any such finite fragment ZFC*. 

The results become rather curious when there are reals in V that 
are not in L. Suppose there are sufficient La |= ZFC and we force 
to collapse Ui, with the resulting forcing extension V[g], where g is a 
real coding cu^ ■ By the argument above, there is in V[g] a countable 
a;-standard model M |= ZFC + V — L in which g exists and is actually 
definable. Since M has the standard w, it interprets g correctly and 
so the well-founded part of M exceeds uY ■ But since M \= V = L, it 
thinks that g is constructible as well as definable, constructed at some 
(nonstandard) ordinal stage a > ujX > cuf ! 

Another interesting example arises when O" exists. This assumption 
implies the hypothesis of the theorem, and so by the theorem there is 
a pointwise definable model M of ZFC + V = L, well-founded as high 
in the countable ordinals as desired, in which the true O" is a member, 
thought by M to be constructible at some stage a, necessarily in the ill- 
founded part of Af . Thus, the true O'^ exists unrecognized but definable 
in a model of ZFC + V = L that is well-founded far beyond the true 
cjf! For example, the model M can be well-founded beyond a rich class 
of (countable) Silver indiscernibles (or even beyond cuY if one forces to 
collapse as in the previous paragraph) and have the same theory as the 
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true L . The true ordinal indiscernibles of V become discernible in M, 
however, since it is pointwise definable. 

Corollary 10 may seem paradoxical when applied to a countable tran- 
sitive model M having enormous large cardinals incompatible with L. 
For example, perhaps M has supercompact cardinals inside it or has 
measures that are iter able in V, meaning all iterates are well-founded; 
they cannot be iterable in M"*", since this is a model of V = L. In 
any case, corollary 10 already implies that every countable model of 
ZFC or GBC admits an end-extension to a pointwise definable model 
of set theory. In theorems 11 and 13, however, we shall find pointwise 
definable extensions with the same ordinals. 

Let us now turn to the question of the extent to which definability is 
first-order expressible, by making a number of observations that illus- 
trate the range of possibility. We have already noted that the property 
of a model being pointwise definable is not first-order expressible, since 
it is not preserved by nontrivial elementary extensions. Since point- 
wise definability is a strong generalization of the axiom V = HOD, 
it is tempting to introduce such notation as V = D or V = HD to 
express that a model is pointwise definable, thereby maintaining a par- 
allel to the classical V — HOD notation while emphasizing that the 
definitions need no parameters. Wc hesitate to adopt this notation, 
however, because we fear it would incorrectly suggest that the concept 
is first-order expressible, which isn't the case. 

(i) There is no uniform definition of the class of definable elements. 
Specifically, there is no formula df(a;) in the language of set theory that 
is satisfied in any model M \= ZFC exactly by the definable elements. 
The reason is that if Mq is pointwise definable and Mq -< Af is a 
nontrivial elementary extension, then the definable elements of Mq and 
M are precisely the elements of Mq, and so Mq should satisfy Vx df (x) 
but M would satisfy 3,x^df(,x), contrary to Mq -< M. 

(ii) In some models of set theory, the class of definable elem,ents is 
a definable class. Although there is no uniform definition of the class 
of definable elements, it can sometimes happen that a model enjoys a 
certain structure that allows it to see its collection of definable elements 
as a definable class. For example, in a pointwise definable model, the 
class of definable elements includes every object and is therefore defined 
by the formula x — x. See also (iv) and (v) below. 

(ill) In other models, the collection of definable elements is not a 
class. Consider any pointwise definable model M \= ZFC, and let N 
be an ultrapower of M by a nonprincipal ultrafilter. The parameter- 
free definable elements of N are exactly the elements in the range of the 
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embedding. If this collection were a class in then could reconstruct 
M and realize itself as an ultrapower, which is impossible. 

(iv) In some models, the definable elements form a definable class, 
but there is no class function r ^ ip^ mapping definable elements to 
definitions of them. Suppose that M is a pointwise definable model of 
ZFC. The definable elements of M are all of M, which is certainly a 
definable class in M. But M cannot have a function r i— )■ ipr associating 
to each element r of M, or even to each real of M, a defining formula 
%l)r of r, since such a map would reveal to M that it has only countably 
many objects. 

(v) In other models, the definable elements are a set and there is a 
set definability map r ipr. Suppose that k is an inaccessible cardinal 
(this hypothesis can be reduced), and observe by a Lowenheim-Skolem 
argument that there are numerous 7 < k with -< \= ZFC. It 
follows that the definable elements of V^, are all in V-y and satisfy the 
same definitions there as in V^. Since Vyis a set in V^, we may construct 
in the function r ipr that maps every definable element r of to 
the smallest definition ipr of it, and because -< V^, this function has 
the same property with respect to V^, as desired. The large cardinal 
hypothesis can be reduced; it is sufficient to have an a;-model M with 
some Mo G M having Mq -< M. 

(vi) No model can have a definable definability map r ^ ip^. If such 
a map were definable, then since there are only countably many defini- 
tions we could easily diagonalize against it to produce a definable 
real not in the domain of the map. In (v), the map is definable from 
parameter 7. 

The surviving content of the math-tea argument seems to be the 
observation that in any model with access to a definability map r ipr, 
the definable reals do not exhaust all the reals. 

3. Pointwise definable forcing extensions 

Let us now move beyond the elementary methods and results of sec- 
tion 2, and prove that every countable model M of ZFC has a carefully 
chosen class forcing extension M[G] that is pointwise definable, so that 

all objects of M, as well as those in MfG], become definable in M[G] 
without parameters. The forcing is sufficiently adaptable so as to pre- 
serve all the usual large cardinal axioms. 

Theorem 11. Every countable model of ZFC has a pointwise definable 
class forcing extension. 

After proving this theorem (on a New York City subway platform), 
we came later to learn of earlier work achieving it. The introduction of 
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[Dav82], for example, claims the result in the special case of countable 
transitive models as a corollary to its main theorem, but the article 
unfortunately provides little further explanation.^ Also, Ali Enayat in 
remark 2.8.1 of [Ena05] briefly suggests a proof method very similar 
to our proof of theorem 11, although he does not state the result as a 
formal theorem. Most of Enayat's excellent paper is concerned with the 
Paris models, models of ZF in which every ordinal is definable without 
parameters, but in several instances he achieves this by establishing 
pointwise definability. One of his main results is [Ena05, theorem 2.19], 
which asserts that if there is an uncountable transitive model of ZFC, 
then for every infinite cardinal k, there is a Paris model of ZF having 
size K. These are very large models, but have only countably many 
ordinals, since each ordinal is definable without parameters. 

Our proof of theorem 11 is based on a technique of Simpson [Sim74], 
an early application of forcing to the study of models of arithmetic. 
Namely, Simpson proved that every countable model M of PA or ZFC 
has an amenable class U (i.e. for any x G M, x D U E M) with the 
property that every element of the expanded structure (M, U) is defin- 
able without parameters. Simpson uses forcing to define a new generic 
proper class U which codes every element of the universe. The original 
structure is expanded by adding a predicate for this new class, produc- 
ing a pointwise definable model in the larger language. Our strategy 
will be simply to follow this expansion by further forcing that codes U 
and the new generic filter into the first-order structure of the model, 
thereby eliminating the need for the additional predicate U and pro- 
ducing a pointwise definable model in the original pure language of set 
theory. In other words, we will show that every countable model of 
ZFC can be extended to a pointwise definable model of ZFC, a model 
in which every set is definable without parameters. 

We begin with a brief review of Simpson's [Sim74] result. Although 
his main result concerned models of PA, he concludes his paper with 
a ZFC version of the theorem, and the proof given below is a straight- 
forward adaptation of his argument to the ZFC context. 



The main theorem of [Dav82], using Jensen coding, is that every transitive 
model of set theory has a class forcing extension in which V = L{r) for a real r, 
such that La{r) ^ ZF for every ordinal a. Since this situation is captured by a 
first-order theory which can hold in uncountable models, however, it cannot by itself 
imply pointwise definability; David apparently had in mind an appeal to further 
details of the proof. Wc note that in comparison to Jensen coding, our forcing is 
mild: it is progressively closed and can be made to preserve any of the usual large 
cardinals. 
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Theorem 12 (Simpson). Let (M, g) be a countable model of ZFC 
Then, there is a class U C. M such that: 

(i) (M, e, U) satisfies ZFC in the language with a predicate for U. 

(ii) Every element of M is first-order definable in (M, & ,U). 

Proof. Let us begin by enumerating the countable structure M — 
{an\n <uj}. Using the axiom of choice in M, it easy to see that 
every set a„ G M is coded in M by a binary sequence, say a„ G 2", 
for some ordinal a & M. Indeed, we can arrange things in such a 
way so that all of the relevant coding is done only on the even dig- 
its of a„, while all odd digits are 0, except that the sequence a„ ends 
with two consecutive I's immediately following a limit ordinal. These 
restrictions on codes will be useful when we concatenate many such 
sequences. 

Consider the class forcing in M to add a Cohen class of ordinals, 
that is, the partial order Q = 2^*^^^ consisting of all ordinal length 
binary sequences, ordered by extension. Since M is countable, we may 
enumerate the dense subclasses (Z^„ | n < cu) of Q that are definable 
in M from parameters. Let us suppose is defined by the formula 
(fin{x), using parameters from M, and by padding if necessary, we may 
assume that the parameters used in are among {aj \ j < n}. 

We now construct a certain M-generic filter for Q that will meet all 
the dense sets Dn while simultaneously coding all the elements of M. 
Specifically, we recursively define a descending sequence of conditions 
(pn \ n < uj) in Q, beginning with pq = 0. At odd stages, let P2n+i be a 
minimal-length extension of such that P2n+i ^ At even stages, 
let P2n+2 = P2n+i'"o„, the sequeucc obtained by concatenating the code 
(in to the end of P2n+i- Finally, let U — [Jn&LoPn- "^^^^ union of 

the filter consisting of the initial segments of C/, which by construction 
is M-generic for Q, since we met each dense class D„. The forcing Q 
is K-closed for every k in M, and so it follows by standard class-forcing 
arguments that we retain ZFC in the language with U in the structure 

{M,e,U). 

A straightforward inductive argument now shows that every a„ and 
Pn is definable in this structure {M,E,U). To see this, suppose that 
P2n and Oj for j < n have already been defined. Then, P2n+i is simply 
defined as the least initial segment q oi U extending p2n such that 
M \= '-f uiQ)- Notice that uses only parameters from aj for j < n, 
which have already been defined, so this definition can be carried out 
without the use of any parameters. Now, we define p2n+2 as the least 
initial segment qofU, extending P2n+i, that ends in two consecutive I's 
following a limit ordinal. Given P2n+i and P2n+2, it is a trivial matter 
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to define a„, and a„ is easily defined as tlie unique set coded by a„. In 
this fashion, every element of the universe M can be given a first-order 
parameter- free definition in the structure (M, G, C/). □ 

In the proof of theorem 12, we took care in the selection of U that the 

augmented structure {M,^,U) would be pointwisc definable. Let us 
briefly argue that such extra care is indeed required in general, for not 
every generic filter U C 2<'-'^^ over a countable structure M need give 
rise to a pointwise definable structure (M, E,U). One easy way to see 
this is simply to let (A^, e*,U*) be an internal ultrapower of (M, e, U) 
by a nonprincipal ultrafilter on . Since the definable elements must 
be in the range of this map, it follows that (A^, e*, t/*) is not pointwise 
definable. But by elementarity, U* is A^-generic for the forcing 2^'-'^^ 
in N. Alternatively, one may construct transitive counterexamples by 
starting with an uncountable (M, g) |= ZFC, whose generic expan- 
sions {M,E,U), obtained by forcing over V, remain uncountable and 
therefore not pointwise definable, but further forcing over V can make 
them countable, while preserving the M-genericity of U. So extra care 
is indeed required. In general, of course, if one starts with a point- 
wise definable structure M, then any expansion (M, G,f/) of it will 
remain pointwise definable, and indeed, for this one only needs that M 
is a Paris model (where every ordinal is definable without parameters) , 
since generically U will list every set of ordinals of M and we will be 
able to define the beginning and ending points in U of a code for any 
desired set. 

We now use Simpson's result to prove theorem 11, where the point- 
wise definable structure is not obtained in an expansion of the original 
model M, by adding extra predicates to the language, but rather in an 
extension of M, obtained by forcing. Thus, we enlarge M to a struc- 
ture M[G] in which every object is definable without parameters in the 
pure language of set theory. 

Proof of theorem 11. Let (M, g) be a countable model of ZFC. By forc- 
ing over M if necessary, we may assume without loss of generality that 
(M, g) 1= GCH. By theorem 12, there is an amenable class U C. M so 
that every element a G M is first- order definable without parameters 
in (M, G, t/), which satisfies ZFC in the language with U. We now rid 
ourselves of the extra class U by forcing to code it into the structure 
of the universe. Specifically, consider in M the definable sequence of 
uncountable regular cardinals 6a = ^^w a+i, conveniently separated by 
large gaps that will avoid interference, and let P = Haeu Add{Sa, ^J"*") 
be Easton's forcing, which forces failures of the GCH precisely at the 
cardinals ioi a e U . If G C P is M-generic, then it is well known 
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that M[G] 1= ZFC and all cardinals and cofinalitics are preserved. It 
follows that the map a ^-^ 5a is definable in MfG], and so U is definable 
in M[G] by the equivalence a E U ii and only if 2^" > 5'^. 

We shall now perform further forcing to ensure V = HOD in a fur- 
ther extension M[G][if], by coding into the GCH pattern at the regular 
cardinals 7^ = ^'^oj-a+s, which sit conveniently in the gaps of the 5a se- 
quence, again avoiding interference. Specifically, let R be the Easton 
support class-length forcing iteration, which at stage a generically de- 
cides either to force with trivial forcing, which will preserve the GCH 
at 7a, or with Add(7a, 7++), which will violate the GCH at 7^. That 
is, the stage a forcing is the lottery sum {1} ® Add(7Q, 7^"*"), which 
is the disjoint union of these partial orders joined by a new common 
upper bound 1, so that any generic filter picks exactly one factor and 
forces with it. Since the forcing at stage a is <7a-closed, we may nicely 
factor the iteration R at arbitrarily large cardinals as set forcing fol- 
lowed by highly closed tail forcing, and so in the terminology of [Rei06] 
it is progressively closed and therefore preserves ZFC. Note also that M 
preserves all cardinals and cofinalities over M[G]. To see that R forces 
V — HOD, we observe simply that every set of ordinals will eventually 
be coded into the GCH pattern on the coding points 7^, because we can 
extend any condition to a stronger condition that opts for the trivial or 
nontrivial side of the forcing in the correct pattern so as to code that 
set on an interval. Another way to say it is that the necessary book- 
keeping is performed generically by a density argument. Specifically, 
suppose that p G M and r is a R-name such that p It- r C 7 for some 
ordinal 7. Let f3 be large enough so that it is beyond the support of p, 
beyond 7 and also large enough so that r is a R^-name. Extend p to 
a stronger condition q, which for ^ < 7 opts for trivial forcing at stage 
/3 + ^ with the same Boolean value as |^ e r ] and for nontrivial forcing 
at stage (3 + ^ with the Boolean value of ^ t]. That is, q{f3 + ^) is an 
R/3+^-name for the condition that chooses one way or the other in the 
lottery sum at that stage, depending on whether ^ e th^, where is 
the generic filter up to stage /3. The condition q therefore forces that 
the set named by r, whatever it is, will be coded into the GCH pattern 
of the 7/3+^ for ^ < 7. Thus, if /J C R is M-gencric, every set of ordi- 
nals in M[G][i7] will be ordinal- definable, and since every set can be 
easily coded by a set of ordinals, it follows that M[G] [H] \=V — HOD. 

Let us now complete the argument. Since cardinals were preserved, 
it follows that the map a 5a is definable in MfCJIiJ]. Since the R 
forcing only affects the GCH pattern at the 7q,, it does not upset the 
coding we did in M[G] at the 5a, and so the class U remains definable in 
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M[G'][i/] as the class of a for which the GCH fails at 5a- Note that the 
class M is definable from U in M[G][if] as the class of sets coded by a 
subsequence of U . Since (M, G, f/) is pointwise definable, it now follows 
that every element of M is definable in M[G][iJ] without parameters. 
In particular, every ordinal is definable in M[G][i7] without parameters. 
Since M[G\ [H] is a model olV — HOD, this implies that every element 
of M[G][i7] is definable without parameters. □ 

One can easily combine the two steps of forcing in the proof of theo- 
rem 11 by interleaving them into one forcing iteration, which codes U 
into the continuum pattern at 5a and holds lotteries at 7^, leading in 
the same way to a forcing extension satisfying V = HOD in which U is 
definable. We chose for clarity to separate the coding into two steps. 

The argument can be easily modified to use other coding methods. 
For example, by using the <)* coding method as in [BT09] one may also 
achieve GCH in the final pointwise definable model. 

Note also that the forcing of theorem 1 1 is very mild from the large 
cardinal perspective, for we first add a Cohen generic class of ordinals, 
and then code it into the GCH pattern while also forcing V = HOD. 
These iterations are extremely nice, progressively closed Easton sup- 
port iterations and can be made to have increasingly large gaps where 
no forcing occurs. Thus, they can easily be made to preserve any of the 
usual large cardinal notions. One may therefore find pointwise defin- 
able forcing extensions while preserving one's favorite large cardinals. 
For example, if M has a supercompact cardinal n, one should first make 
K. Laver-indestructible, and then do all the coding above k, which will 
preserve the supercompactness of k since it is <«;-directed closed. 

4. Extending the result from ZFC to GBC 

For the main contribution of this article, we should like now to ex- 
tend the result from ZFC to Godcl-Bcrnays GBC set theory, which is 
a natural context for pointwise definability since it allows for a precise 
formal treatment of classes in set theory and many of the pointwise 
definability arguments have involved augmenting a model of set theory 
with additional proper classes, such as those arising with class forcing. 
We refer the reader to [Jec03] or [Men97, p. 225-86] for an overview 
of Godel-Bernays set theory. Here, we regard a GBC model of set the- 
ory as a triple M = (M, S', g), consisting of a model (M, g) of ZFC 
augmented with a family S C P[M), whose members are the classes 
of Ai, satisfying the GBC axioms. The GBC axioms extend the ZFC 
axioms to this two-sorted second-order context by allowing formulas in 
the replacement and separation axioms to make use of finitely many 
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class parameters (but not to quantify over classes, a strengthening that 
constitutes Kelly- Morse set theory). In particular, if X is any finite list 
of classes from S, then the expansion (M, G, X), obtained by interpret- 

— * — * 

ing the classes in X as predicates over M, satisfies ZFC(X), the version 

— * 

of ZFC in which the classes of X may appear as atomic predicates in 
the replacement and separation axioms schemes, and furthermore, any 
class definable in (M, G,X) must be in S. In addition, GBC includes 
a global version of the axiom of choice, meaning that there is a single 
class choice function F e S such that F{x) Ex for every nonempty set 

X. 

Although the GBC axioms admit an elegant and economical formu- 
lation purely in terms of classes, as every model of GBC is determined 
entirely by its collection of classes, we prefer the two-sorted set-class 
formulation here so as to emphasize the connection with models of 
ZFC. In particular, any model (M, g) of ZFC can be extended to a 
model (M, 5*, g) of GBC by first finding an M-generic filter G C Q 
for the class forcing Q = M<°^^ to add a global well-ordering of the 
universe — a forcing notion that is K-closed for every cardinal k and 
hence adds no sets — and then letting S consist of the classes defin- 
able in (M, G, G) from parameters; the forcing to add G ensures global 
choice in (M, S, g), and is unnecessary if (M, g) already has a global 
choice class function. It follows that GBC is conservative over ZFC 
in the sense that any statement purely about sets that is provable in 
GBC is also provable in ZFC. 

The method of forcing works over models of GBC just as it does 
over models of ZFC. In particular, if P is a partial order in a model 
Ai = (M, S, g) of GBC and G C P is A^-generic, then we may define 
M[G] = {M[G],S[G],e), where M[G] and S[G] consist of interpreting 
in the usual way via G the sets and classes that are P-names in A4. 
In the case of set forcing, where P G M, the analogues of the basic 
ZFC forcing lemmas hold also for GBC, and in this case the forcing 
extension A^[G] continues to satisfy GBC. Class forcing, in contrast, 
can destroy GBC just as it can destroy ZFC, such as by making every 
set countable, to give one badly behaved example. Nevertheless, there 
are large families of nicely behaved class-forcing notions that necessarily 
preserve GBC. This includes progressively c/osed forcing in the sense of 
[Rei06], that is, forcing notions that factor for arbitrarily large cardinals 
K as Po * Ptaii, where Pq is a set and Pjan is <fi;-closed. As it happens, 
all of the forcing notions necessary to carry out the constructions in 
this article are progressively closed, and so the corresponding forcing 
extensions will all satisfy GBC. 
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The main theorem of this section is that every countable model of 
Godel-Bernays set theory can be extended to a pointwise definable 
model. 

Theorem 13. Every countable model of Godel-Bernays set theory has 
a pointwise definable extension, where every set and class is first-order 
definable without parameters. 

Thus, the original countable GBC model (M, S, g) is extended to a 
pointwise-definable ZFC model {M[G], e), such that every set in M[G] 
and every class in S is definable in (M[G], g) without parameters. 

In order to prove this theorem, we shall first prove a special case 
of it, the case where the original model (M, 5, e) is principal, mean- 
ing that there is a class X E S such that every class in S is first- 
order definable in (M, e, X) with set parameters. The principal models 
of GBC include many natural instances. For example, earlier wc ex- 
plained that any model of ZFC can be transformed into a GBC model 
with the same sets, by first forcing global choice and then augmenting 
with the classes definable from that generic well-ordering; the result- 
ing GBC model is principal by construction. Furthermore, the collec- 
tion of principal models of GBC is closed under forcing, even proper 
class forcing (provided GBC itself is preserved), since one can amal- 
gamate the original generating class with the newly generic class to 
form a new generating class. So we have plenty of principal models of 
GBC. Nevertheless, it is also easy to construct non-principal models, 
such as the weak limit of a suitable iteration of u many extensions 
M C M[Go] C M[Go][Gi] C whose union satisfies GBC but is 
nonprincipal. Additional non-principal models are provided by the 
fact that no model (M, S, g) of Kelly-Morse set theory can be prin- 
cipal as a GBC model, since KM proves that every class X admits a 
first-order truth class for (M, E,X), since for each n the truth 
class is unique satisfying the recursive definition of truth and these 
classes can be unified into one class in KM, but no such truth class can 
be first-order definable from X over M. An instance of this arises from 
an inaccessible cardinal k with the structure (Vk,K;+i,g), which is a 
model of GBC and in fact KM, but is easily seen not to be principal 
as a GBC model on cardinality grounds, since it has 2'^ many classes 
but only n many sets and hence only k, many classes definable from 
any fixed class. Nevertheless, this model can be made principal by the 
forcing to collapse 2'^ to k, which adds no sets to V^, but which adds a 
generic ^-enumeration of the ground model subsets of T4. 
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Theorem 14. Every countable principal GBC model has a class forcing 
extension that is pointwise definable, in which every set and class is 
first-order definable without parameters. 

Proof. Suppose that A4 = (M, S,e) is a principal countable model 
of GBC. To prove the theorem we must show there is a class forcing 
extension {M[G], g), satisfying ZFC such that every set in M[G] and 
every class in S is definable in (M[G],g) without parameters. The 
proof will follow the proof of theorem 11, extending the argument to 
handle the issues arising on account of the second-order part of the 
models. Since M. is principal, there is a class X e S such that every 
class in S is first-order definable in the structure (M, e , X) . By forcing 
if necessary, we may assume Ai \= GCH. 

The first step is to prove the analogue of Simpson's theorem for this 
case. Specifically, we claim that there is an amenable class U such 
that {M,&,U) satisfies ZFC(f/) and every set and class in (M, 5, g) 
is definable in {M,&,U) without parameters. The proof is just as 
in theorem 12, with an extra step. Enumerate M = {an \ n < cu) 
and choose codes a„ G 2<*-^^° for each a„. Let Q = 2<*-*^° and con- 
struct an Al-generic class C/q C Q as in the proof of theorem 12 so 
that every set in M is definable without parameters in {M, E,Uo) ■ 
Since the forcing is /t-closed for every cardinal k, it adds no sets and 
M[Uo] = (M, S[Uo], g) 1= GBC, where S[Uq] is the collection of classes 
obtained by interpreting via Uq the Q-names in M. Let U be the class 
X (BUq, combining the two classes in some canonical manner as a class 
of ordinals, and observe that (M, G,f/) satisfies ZFC(f/), because the 
forcing Q is progressively closed - indeed, it is K-closed for every cardi- 
nal K. Since Uq is definable from U in (M, G, ?7), it follows that every 
element of M is definable in (M, G, U) without parameters. And since 
X is also definable from U there, and every class in S is definable from 
X with set parameters, it follows that every class in S is also definable 
in (M, G, U) without parameters, as desired. 

As in theorem 11, we may now force to code the digits of U into 
the GCH pattern at the cardinals = '^Lj-a+i, producing a forcing 
extension M[G] in which U is definable without parameters. It follows 
that M is also definable there, since the sets in M are exactly the sets 
that are coded into a block of Uq. Next, a further forcing extension 
M[G] [H] satisfies V = HOD by generically coding the GCH pattern at 
the cardinals 7^ = as before. Thus, every element of M[G][iJ] 

is definable from ordinal parameters, but these are definable without 
parameters since every element of M, including every ordinal, is defin- 
able from M and Uq, which are definable from [/, which is definable 
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without parameters in (M[G][if], g). It follows that every class in S 
is definable without parameters in (M[G][if], e), since X is definable 
from U there, and U is definable without parameters. So every set and 
class in (M[G][i7], e) is definable without parameters, as desired. □ 

To complete the proof of theorem 13, it suffices to show that every 
countable GBC model A4 can be extended to a principal GBC model. 
Our initial attempts to prove this involved mcta-class forcing. We 
wanted to replicate the situation of the model (Vr, V^+i, g) in the case 
K is an inaccessible cardinal, since this structure is non-principal, but is 
made principle in the forcing extension V[G], where G C Co11(k, K+i), 
which collapses 2'^ to k. The generic filter G can be viewed as a subclass 
of K X Vk, whose columns are exactly the ground model subsets of V^, 
which are exactly the classes of the original model. In this way, the 
old classes are unified into one new generic class. The forcing in this 
argument is mcta-class forcing, as opposed to merely class forcing, since 
the individual conditions arc classes in V^+i, g). 

A similar idea appears to work over any model of Kelly-Morse set 
theory, although the details of verifying the meta-class forcing technol- 
ogy are abundant. The idea is that given a model (M, S, g) |= KM, 
one considers the meta-class of conditions consisting of an ordinal a 
and a subclass A C a x M, with A E S. Stronger conditions enlarge a 
and specify additional columns, and so the forcing is exactly analogous 
to Coll(ORD^, S) as above. In this way, it is dense to add any class of 
S onto a vertical slice, and the generic class G C ORD xM will unify 
all the classes X E S into one class, making a principal model. 

Such a meta-class forcing method, however, does not seem to work 
easily over GBC models, and one should not expect to add a single 
generic class from which all the classes of S are uniformly definable, by 
varying only set parameters. 

Nevertheless, we avoid the difficulties of these higher-order forcing 
arguments and complete the proof of theorem 13 by appealing to the 
following remarkable observation of Sy Friedman (sketched in an email 
correspondence with the first author), which shows that every count- 
able GBC model docs indeed have a principal extension with the same 
sets. Kossak and Schmerl prove a similar fact about models of PA in 
[KS06, Theorem 6.5.6], showing that for any model (M, Rq, . . .) |= 
PA* there is a G C M such that (M, G) \= PA* and each Ri is definable 
in (M, G). It is the Kossak/Schmerl proof method that we shall adapt 
to GBC models here. Viewing the original Kossak/Schmerl theorem as 
one about models of GBC""^, the theory GBC with the infinity axiom 
replaced by its negation (and augmented with the assertion that every 
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set has a transitive closure), Ali Enayat has described theorem 15 here 
as one of the positive instances where a model-theoretic theorem about 
GBC^°° extends to GBC; not all of them do. 

Theorem 15 (Friedman/Kossak/Schmerl). Every countable model Ai 
of GBC can be extended to a principal model Ai[Y] \= GBC while 
adding no sets, only classes. Indeed, in the extension, every set and 
class in Ai is definable in the structure (M, E,Y). 

Proof. For clarity, let us mention up- front that the extension A^[y] 
we produce will not necessarily be a class forcing extension of A4, 
although it will satisfy GBC because of the close connections it has with 
a sequence of increasingly partially generic extensions. Specifically, for 
each n we will be able to realize Ai [Y] as a E„-gcncric extension of Ai 
by a partial order Q„, meaning that all E„ definable dense subclasses 
of Q„ are met by the filter, and by increasing n this suffices to capture 
the whole of GBC. 

Suppose that Ai = (M, S,e) is a countable model of GBC, meaning 
that it has countably many sets and classes. Enumerate the classes of 
ordinals in 5" as (A„ | n < cu), so that An C ORD'^ and every class 
in S is first-order definable from some An- We shall add a class Y of 
ordinals in such a way that (M, G, Y) satisfies ZFC(y) and every An is 
coded into Y, hidden away by coding on increasingly difficult-to-define 
subclasses of ordinals. Specifically, we will construct a sequence of trees 
Qo 3 Qi ^ Q2 D • • • , each definable but with increasingly complex 
definitions. The class Y will give a branch through HQn, and A^ will 
be determined by the choices that Y makes within Q„. Thus An will 
be recoverable from Y and but the increasing complexity of Q„ 
suggests that we should not expect a uniform definition. 

If we succeed, then it follows by induction that every An and hence 
every class in S, is definable in (M, G, Y), whose definable classes form 
a principal GBC model, and so we will have proved the theorem. 

The argument will rely on some refinements of the customary gen- 
eral facts about class forcing, which we shall summarize here but not 
prove. First, for any sufficiently nice^ class forcing notion P, the forcing 
relation p Ihp (/? is definable in M from P; the refinement we need is that 
for (f of bounded complexity the forcing relation has some bounded 
complexity Sjt(P) in M. Second, whenever p I hp (/?, then M[G] |= </? 
for any M-generic filter G C P containing p; the refinement we need 

^The question of whether every class forcing notion has a definable forcing rela- 
tion (i.e. 'is sufficiently nice') is open. However, a sufficient condition which holds 
of a great many class forcings, including all those appearing in this paper, is that 
every subset A c P is contained in a complete subposet Q Cc P 
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is that for ip of bounded complexity there is some k such that 
M[G] 1= (/? for any Efe(P)-generic filter G C P containing p. Third, 
whenever M[G'] \= for some M-generic filter G C P, then there is 
a condition p E G such that p Ihp (/?; the refinement we need is that 
for if of bounded complexity there is some k such that whenever 
M[G] 1= ip for some Sfc(P)-generic filter G C P, then p Ihp for some 
p & G. These refinements simply assert that the forcing mechanics 
are sound with respect to partially but sufficiently generic filters, and 
can be proved by induction by following the usual proofs of the forcing 
lemmas and paying attention to the complexity of the dense sets that 
arise in the arguments. It is not relevant for our application to find the 
strictly optimal relations between n and k, although one could do this. 

Now, let us return to the argument and create the generic coding 
class Y. Let Qo = Add(ORD, 1) = 2<oRD ^^le class of aU binary 
ordinal length sequences, ordered by extension. We will construct a 
descending sequence of class forcing notions 

Qo :^ Qi :^ Q2 13 • • • 

Each Q„ will be a perfect tree, that is, a subclass of 2^^^^ that is 
splitting (any node can be extended to two incompatible nodes, though 
not necessarily at the next level) and contains full limits. There is a 
canonical embedding of 2^*-*^° into any perfect tree, whose image is 
exactly the splitting nodes (nodes with two immediate successors) of 
the tree. This embedding is dense, and therefore witnesses the forcing 
equivalence of Add(ORD, 1) and any perfect tree. Thus, all the Qn 
are individually forcing equivalent to Add(ORD, 1), which is K-closed 
for every cardinal k and therefore adds no new sets, while forcing ZFC 
relative to the generic class. 

Given Q„, we construct Qn+i in two stages. First, we will refine 
Q„ to a subtree with the property that any branch will meet all S„ 
definable dense subclasses of Q„. By increasing the length of the stem, 
or portion of the tree below the first branch point, in this stage we 
will also guarantee a branch through the intersection. We then further 
refine this subtree to obtain Qn+i, ensuring that any branch through 
Q„+i codes An. 

The construction proceeds as follows. We fix a sequence of ordinals 
(a„ I n G u) cofinal in M (these will govern the growth of the stems 
of the Qn)- Given Q„, we fix an enumeration {D^ \ ot e ORD) in 
M. of all S„(Q„) definable dense subclasses of Q„. We now construct 
an embedding / : 2^'-*^^ Q„. Let /(0) be the least splitting node 
of Q„ which has length exceeding (by 'least' we mean the node of 
shortest length, and if more than one such node exists we take the least 
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according to some fixed class well-ordering of A4 from S). Given /(p) 
where p has length a, and fixing e e {0, 1}, we let f{p^e) be the least 
splitting node q of Q„ extending f{p)'"e such that q G D^- For p 
of limit length, we take f{p) to be the least splitting node extending 
[jpi(2pfip') lyiiig ill Let Q* denote the subtree of Q„ deter- 
mined by /, that is, the tree consisting of all predecessors of members 
of ran(/). For each a, any branch through Q* will necessarily meet 
{f{p) I P has length a} C Da, and so any branch will meet all E„ 
definable dense subclasses of Q„. 

We now refine Q* to encode by selecting only those q e Q* which 
"choose according to on the even sphtting nodes." That is, we select 
those q such that, for any predecessor q' of q, if q' is a splitting node of 
Q* with exactly 2 ■ a many splitting nodes preceding it, then g' 1 G g 
if and only if a G An- Let Qn+i be the subtree of Q* determined 
by such q, that is, the tree consisting of all predecessors of such q. 
Given Q„ together with any branch of Qn+i we can easily recover A^ 
by comparing values of the branch corresponding to the even splitting 
nodes of Q„. Conversely, note that Q„+i was defined from parameters 
Q„ and 

This completes the construction. We now take Y — f^Q^. That Y 
is nonempty and contains a single branch follows from the fact the Q„ 
are nested and have stems of increasing length unbounded in ORD"^. 
The key observation remaining is that the construction ensures that 
(M, G,y) satisfies ZFC(y). Any axiom of ZFC(r) has some logical 
complexity S„ in the forcing language, and by the refined forcing facts 
mentioned above there is some kn sufficiently large so that the forcing 
lemmas concerning E„ work as expected for all ^k„{Qk„) generic filters 
of Qk„ . By construction Y has the required level of genericity for Q^^ , 
and so (M, E,Y) satisfies every axiom of ZFC(y), as desired. As we 
have observed, each An is definable from Y and Q„. The partial order 
Q„_i_i is definable from Q„ and An, and it follows inductively that each 
An and each Q„ are definable in (M, E,Y). Thus every class in S is 
definable from Y, and so we have produced the desired principal model 
{M, G, Y) extending Ai. In particular, every set and class of this model 
is definable using only the parameter Y over M. □ 

Theorem 13 now follows from theorems 14 and 15, since any count- 
able model of GBC can first be made principal by theorem 15 and then 
pointwise definable by theorem 14. In fact, the Friedman/Kossak/Schmerl 
theorem (theorem 15) can also serve as a replacement for Simpson's 
theorem 12 in the proof of theorem 11, since as we mentioned every set 
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and class of Ai is definable in the structure (M, E,Y), which was the 
whole point of theorem 12. 

Finally, we remark that the proof we have just given of theorem 13 
allows us to preserve any of the usual large cardinals from the ground 
model to the pointwise definable extension. This is because the ap- 
phcation of theorem 15 does not add sets, and so preserves all large 
cardinal properties, and the remaining forcing of theorem 14 is the very 
nice, progressively closed Easton-support forcing iteration to code the 
class Y and then force V = B.OD. As we mentioned after theorem 
11, this can be easily arranged to accommodate any of the usual large 
cardinal notions. Thus, any countable model of GBC with any of the 
usual large cardinals has an extension to a pointwise- definable model 
of ZFC, in which every set and class is definable without parameters, 
and in which those large cardinals are preserved. 
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